2026 CVE Vulnerabilities
83,482 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26098 | MEDIUM | 5.5 | 0.1% | Feb 20, 2026 | Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via ... |
| CVE-2026-26097 | MEDIUM | 5.5 | 0.1% | Feb 20, 2026 | Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via ... |
| CVE-2026-26096 | MEDIUM | 5.5 | 0.1% | Feb 20, 2026 | Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network... |
| CVE-2026-26095 | MEDIUM | 5.5 | 0.1% | Feb 20, 2026 | Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network... |
| CVE-2026-26093 | CRITICAL | 9.8 | 1.1% | Feb 20, 2026 | Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command I... |
| CVE-2026-26049 | MEDIUM | 5.7 | 0.3% | Feb 20, 2026 | The web management interface of the device renders the passwords in a plaintext input field. The current password is di... |
| CVE-2026-26048 | HIGH | 7.5 | 0.3% | Feb 20, 2026 | The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of management frame protection, allowing... |
| CVE-2026-25715 | CRITICAL | 9.8 | 0.6% | Feb 20, 2026 | The web management interface of the device allows the administrator username and password to be set to blank values. On... |
| CVE-2026-24790 | HIGH | 8.2 | 0.4% | Feb 20, 2026 | The underlying PLC of the device can be remotely influenced, without proper safeguards or authentication. |
| CVE-2026-24455 | HIGH | 7.5 | 0.2% | Feb 20, 2026 | The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authenticati... |
| CVE-2026-1842 | MEDIUM | 6.2 | 0.2% | Feb 20, 2026 | HyperCloud versions 2.3.5 through 2.6.8 improperly allowed refresh tokens to be used directly for resource access and fa... |
| CVE-2026-2847 | HIGH | 7.3 | 9.2% | Feb 20, 2026 | A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub_44EFB4 of the file /goform/form... |
| CVE-2026-2846 | HIGH | 7.3 | 9.8% | Feb 20, 2026 | A security vulnerability has been detected in UTT HiPER 520 1.7.7-160105. This impacts the function sub_44D264 of the fi... |
| CVE-2026-27072 | HIGH | 7.1 | 0.1% | Feb 20, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PixelYourSite Pixe... |
| CVE-2026-24959 | HIGH | 8.5 | 0.2% | Feb 20, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help De... |
| CVE-2026-24956 | CRITICAL | 9.3 | 0.2% | Feb 20, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjada Download ... |
| CVE-2026-24955 | HIGH | 7.1 | 0.2% | Feb 20, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fox-themes Whizz P... |
| CVE-2026-24953 | MEDIUM | 6.5 | 0.4% | Feb 20, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple F... |
| CVE-2026-24950 | HIGH | 7.5 | 0.3% | Feb 20, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in themeplugs Authorsy authorsy allows Exploiting Incorre... |
| CVE-2026-24949 | HIGH | 7.1 | 0.2% | Feb 20, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods PhotoMe... |
| CVE-2026-24948 | HIGH | 7.1 | 0.2% | Feb 20, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fox-themes Reflect... |
| CVE-2026-24946 | MEDIUM | 6.5 | 0.2% | Feb 20, 2026 | Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-deliver... |
| CVE-2026-24944 | MEDIUM | 6.5 | 0.2% | Feb 20, 2026 | Missing Authorization vulnerability in weDevs Subscribe2 subscribe2 allows Exploiting Incorrectly Configured Access Cont... |
| CVE-2026-24943 | HIGH | 7.1 | 0.2% | Feb 20, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand C... |
| CVE-2026-24941 | HIGH | 7.5 | 0.2% | Feb 20, 2026 | Missing Authorization vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now